cognesy/instructor-addons

Repo bus factorcaution

One contributor made all 15 commits in the last three months, so maintenance continuity depends on a single person. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no documented security policy, leaving vulnerability reporting and response expectations less transparent.

Workflow auditcaution

The single workflow was fully analyzed and has no detected audit findings or untrusted checkout/script-injection sinks; however, its one action use is unpinned, which weakens reproducibility. The pull_request_target trigger is ordinary and harmless here without a sink.